Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/588878A8893411EEAC9C3F2B4AD9E6FC.roa
File: 588878A8893411EEAC9C3F2B4AD9E6FC.roa (raw, json)
Hash identifier: 3HSyKRYQ5YvDNNtrZJHlGcms3GTimu0FcIEWQLOKlTs=
Subject key identifier: EF:3F:D7:DA:BF:EB:95:F7:CB:3F:A9:10:33:0C:0D:F1:F9:70:67:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5211
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/588878A8893411EEAC9C3F2B4AD9E6FC.roa
Signing time: Wed 22 Nov 2023 12:40:41 +0000
ROA not before: Wed 22 Nov 2023 12:40:38 +0000
ROA not after: Sun 19 May 2024 12:40:38 +0000
asID: 140614
IP address blocks: 154.196.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21009 (0x5211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:40:38 2023 GMT
Not After : May 19 12:40:38 2024 GMT
Subject: CN=655df6c9-99b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:3e:41:80:0d:5f:53:f8:93:9b:28:5c:ee:
9f:57:2d:27:d7:2d:1b:20:0d:b5:6c:26:17:54:49:
3a:34:22:90:1d:c4:5e:44:a8:80:0e:81:3a:09:e7:
c2:c4:bf:c4:da:2a:da:8b:b7:32:32:3d:d9:aa:71:
f8:93:32:4a:8c:fd:9f:0c:62:63:92:20:1a:4e:b6:
ad:cf:3d:ba:f6:1e:5c:4f:0a:b1:a1:5f:a5:64:e1:
ff:08:06:7c:7a:f0:25:00:4a:7b:64:34:44:ab:e3:
5b:d8:3f:2f:86:52:03:03:0d:69:1c:bf:bc:28:7d:
1c:1a:ee:23:2b:d5:a8:14:52:ce:2b:b9:d3:3e:55:
f0:c3:99:58:d1:5c:a9:25:38:23:43:1e:a9:92:a9:
d2:f1:f1:1c:26:80:3c:3d:6e:3f:17:ae:f0:c6:d8:
31:7f:5b:09:96:99:1e:a8:e5:19:9a:4b:16:f8:c0:
40:3f:93:2a:61:26:23:3a:36:dd:d2:fa:6b:d9:0d:
2b:a7:9a:4a:2f:92:4d:02:3a:5b:ec:bc:25:3b:a6:
31:9c:d8:ce:e5:9e:d8:a5:a9:0f:bb:c5:7b:f5:2c:
fd:ec:22:cf:df:a2:00:9b:ce:34:d3:d2:47:13:3d:
4b:db:47:67:88:cf:50:f3:b1:d6:8b:a1:2a:f1:21:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:D7:DA:BF:EB:95:F7:CB:3F:A9:10:33:0C:0D:F1:F9:70:67:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/588878A8893411EEAC9C3F2B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.14.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:49:f2:09:54:99:26:fb:fc:e8:92:d0:4b:9f:44:a3:dc:28:
bd:ae:ea:65:1e:90:84:4a:62:3c:b0:ea:ae:cd:50:24:31:85:
db:08:6f:22:33:36:cd:82:a2:55:f1:10:ee:b0:47:fa:98:fc:
5b:e4:b9:fd:1f:18:b3:f8:92:2d:6d:3a:ed:3a:80:0c:2e:36:
b8:cc:5d:55:97:4e:c5:18:03:aa:f3:ec:5f:56:a0:ba:e2:96:
c8:80:d4:cb:d5:f0:b7:d1:97:27:d9:92:b1:a9:1e:65:d9:3a:
ac:ad:31:0b:99:2a:b0:ba:eb:ac:c9:ed:62:e7:8b:67:40:e3:
b3:82:1a:2b:51:1c:04:f5:06:b9:e7:1a:50:da:84:8a:e8:d9:
bf:1a:7e:9a:04:9a:b6:a3:d4:88:58:0a:8d:82:c6:89:f5:fd:
f8:be:60:1f:d7:a0:0e:c2:bc:b3:58:d3:96:8f:d9:2c:64:a3:
c8:7f:76:12:45:fe:5d:56:7e:6e:bb:07:12:0c:1d:39:06:f1:
ba:10:9f:99:c5:2f:a0:48:46:3e:ce:2a:18:4a:f2:16:f2:ec:
8c:2a:a4:ac:8d:ab:78:4c:50:70:ad:b0:80:4c:5e:66:aa:3c:
94:d5:57:e3:e7:8a:82:24:1b:05:21:ac:4d:9c:1b:d1:a9:18:
11:f9:57:89
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUhEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjIxMjQwMzhaFw0yNDA1MTkxMjQwMzhaMBgxFjAU
BgNVBAMTDTY1NWRmNmM5LTk5YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6wT5BgA1fU/iTmyhc7p9XLSfXLRsgDbVsJhdUSTo0IpAdxF5EqIAOgToJ
58LEv8TaKtqLtzIyPdmqcfiTMkqM/Z8MYmOSIBpOtq3PPbr2HlxPCrGhX6Vk4f8I
Bnx68CUASntkNESr41vYPy+GUgMDDWkcv7wofRwa7iMr1agUUs4rudM+VfDDmVjR
XKklOCNDHqmSqdLx8RwmgDw9bj8XrvDG2DF/WwmWmR6o5RmaSxb4wEA/kyphJiM6
Nt3S+mvZDSunmkovkk0COlvsvCU7pjGc2M7lntilqQ+7xXv1LP3sIs/fogCbzjTT
0kcTPUvbR2eIz1DzsdaLoSrxIe3RAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7z/X
2r/rlffLP6kQMwwN8flwZy4wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzU4ODg3OEE4ODkzNDExRUVBQzlDM0YyQjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxA4wDQYJKoZIhvcNAQEL
BQADggEBAExJ8glUmSb7/OiS0EufRKPcKL2u6mUekIRKYjyw6q7NUCQxhdsIbyIz
Ns2ColXxEO6wR/qY/Fvkuf0fGLP4ki1tOu06gAwuNrjMXVWXTsUYA6rz7F9WoLri
lsiA1MvV8LfRlyfZkrGpHmXZOqytMQuZKrC666zJ7WLni2dA47OCGitRHAT1Brnn
GlDahIro2b8afpoEmraj1IhYCo2Cxon1/fi+YB/XoA7CvLNY05aP2Sxko8h/dhJF
/l1Wfm67BxIMHTkG8boQn5nFL6BIRj7OKhhK8hby7IwqpKyNq3hMUHCtsIBMXmaq
PJTVV+PnioIkGwUhrE2cG9GpGBH5V4k=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:24 2024 by rpki-client on console-fra.rpki-client.org